Senior Security Engineer

Senior Cloud Security Engineer - Overview

Impact:
We are actively looking for a Senior Cloud Security Engineer to join our Network and Endpoint Security team. This team plays a crucial role in securing Shipt's applications, endpoints, and cloud infrastructure as well as assisting engineering teams in implementing cybersecurity best practices.

• Design and maintain secure cloud network architectures, including extensive use and ownership of CSPM and CNAPP tools, and provide input on secure architecture/design for new services or migrations.
• Develop and maintain custom security tools, automations, and scripts to automate detection, analysis, response processes, centralize incident response and alerting, and support and guide efforts to resolve issues in production environments, including responding to, investigating, and remediating security incidents.
• Lead and perform formal threat modeling exercises for new and existing cloud services and applications to proactively identify security weaknesses in design and architecture.

• Minimum of 5 years of on-the-job experience in an information security-focused role, with at least 2 years working with a major cloud provider (GCP, AWS, Azure).
• Robust understanding and experience in maintaining mission-critical, resilient, and highly available cloud architectures.
• Direct, hands‑on experience with Infrastructure-as-Code (e.g., Terraform) and source version control (Git/Git Hub).
• Experience with creating detailed documentation and architectural diagrams.
• Experience with cloud service providers (GCP, AWS, Azure).
• Direct, hands‑on experience using and securing Kubernetes clusters with advanced knowledge of containerization methodologies.
• Experience automating and orchestrating security tasks using REST APIs and/or scripting languages like Python, Bash, and Go.
• Experience developing solutions with Agentic Engineering and AI, including responsible usage concepts.
• Deep technical knowledge of TCP/IP networking, application protocols, and network security.

• Cloud Infrastructure, Cloud Security, Dev Sec Ops

Shipt considers candidates located near a Shipt office or workspace in Birmingham, San Francisco, or Minneapolis to be hybrid, which means that they have the flexibility to work from home (with leader approval) or at a Shipt office in order to facilitate the ability to innovate, collaborate, and spark team connections. In‑office expectations will vary by role and leader. Certain roles may require in‑office presence on a full‑time basis.

Please work with your recruiter to learn more about the classification of this role.

• Employees (and eligible family members) are covered by medical, dental, vision and more.
• Employees may enroll in our company’s 401k plan.
• Employees will also be eligible to receive discretionary vacation for exempt team members, paid holidays throughout the calendar year and paid sick leave.
• Other compensation includes eligibility for an annual bonus and the potential for restricted stock units based on role.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or any other characteristic protected by law.

Please inform your recruiting contact upon initial connection if you need a reasonable accommodation. If you need assistance filling out a job application, please complete this form.